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What is claimed: 



A method of exchanging a digital credential between a first 
computer node and a second computer node, the method 
comprising establishing a secure connection between the first node 
and second node over a communication network; initiating, in 
response to the Interaction of a user of a computer node on the 
network, the transfer of a digital credential from the first node to the 
second node over the secure connection. 



2. A method according to claim 1 , further comprising establishing a 
plurality of secure connections between the first node and a plurality 
of respective computer nodes and initiating, in response to the 
interaction of a user of a computer node on the network, the 

1 5 transfer of a digital credential from the first node to one or more of 

the respective computer nodes over the respective secure 
connections. 

3. A method according to claim 1 , wherein the digital credential is an 
20 attribute credential of an entity. 

4. A method according to claim 3, wherein the entity is a user or a 
system or a service. 

25 5. A method according to claim 1 , wherein the digital credential 
determines access to a service. 

6. A method according to claim 1 , wherein the digital credential is an 
identity certificate of a user. 



A method according to claim 1, wherein the communication network 
is the internet. 
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8. A method according to claim 1 , wherein the secure connection is a 
secure sockets layer session. 

5 9. A method according to claim 1 , further comprising presenting to a 
user the digital credential associated with the secure connection. 

10. A computer system comprising a first computer node coupled to a 
second computer node via a communication network, the first node 

10 and second node being arranged to allow a secure connection to be 

established between the first and second nodes, the first node 
having a processor responsive to the interaction of a user for 
initiating the transfer of a digital credential over the secure 
connection established between the first node and second node, 

15 

11. A computer system comprising a plurality of computer nodes 
coupled via a communication network, wherein a first node is 
arranged to allow a plurality of secure connections to be established 
between the first node and a plurality of other nodes coupled to the 

20 network, the first node being arranged to be responsive to the 

interaction of a user to initiate the transfer of a digital credential over 
the plurality of secure connections established between the first 
node and the respective other nodes. 

25 12. A computer system according to claim 11 or 12, further comprising 
a verifier for verifying the digital certificate. 

13. A computer system according to any of claims 1 1 to 12, wherein the 
first node Includes memory for storing the digital credential 
30 associated with the secure connection and a display for presenting 

to a user the digital credential. 
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14. A computer system according to claim 14, wherein a node furtiier 
comprises a controller for arranging digital credentials Into groups, 
the groups being associated with a respective secure connection to 
allow a user to monitor digital credentials associated with a secure 

5 connection. 

15. A computer node for coupling to a second computer node via a 
communication network, the computer node being arranged to allow 
a secure connection to be established with the second computer 

10 node, the computer node comprising a processor responsive to the 

interaction of a user for initiating the transfer of a digital credential 
over a secure connection established between the first node and 
second node. 

15 16. A computer node according to claim 1 5, wherein the processor is 
arranged to receive a digital credential received over the secure 
connection. 

1 7. A computer node according to claim 1 5, further comprising a verifier 
20 for verifying a digital credential. 

18. A computer node according to any of claims 15, further comprising 
memory for storing the digital credential associated with the secure 
connection and a display for presenting to a user the digital 

25 credential. 

19. A computer node according to claim 18, further comprising a 
controller for arranging digital credentials into groups, the groups 
being associated with a respective secure connection to allow a 

30 user to monitor digital credentials associated with a secure 

connection. 



